Airbnb Staff Security Engineer Data 

United States 

182606680

:

On any given day you will be operating across many of the following areas and expectations:

• Strategic Ownership: define, drive, and continuously evolve a comprehensive data security strategy protecting data at rest (online/offline), in transit, and when shared with third parties. Set the long-term vision and roadmap for data security at Airbnb working with partners to execute on the vision and roadmap.
• Technical Leadership: design and oversee the implementation of scalable, resilient protections for secure data storage and transfer, including encryption, key management, access controls, and secure data sharing frameworks. Provide expert guidance to engineering teams and influence architecture and system design decisions.
• Third-Party: establish and enforce policies, standards, and technical solutions for secure data transfer and integration with external partners, vendors, and APIs, while also ensuring Airbnb’s compliance with global regulatory requirements.
• Risk Management & Governance: lead risk assessments and data security reviews for critical systems, products, and partners. Collaborate with Security Compliance, Privacy, and Legal to ensure the practical compliance with the highest standards of global data protection laws (GDPR, CCPA, etc.).
• Incident Response: partner with security and engineering response teams to contribute to technical investigations of significant data security incidents, perform root cause analysis, and champion remediation. Use these incidents as a way to drive continuous improvement efforts to strengthen data security maturity.
• Mentorship & Enablement: mentor, coach, and up-level engineers across the organization on data security best practices. Develop and deliver training materials and documentation to empower both technical and non-technical teams.
• Thought Leadership: stay at the forefront of developments in data security. Influence Airbnb’s internal and external security posture by participating in industry forums, adopting emerging technologies, and publishing best practices.

:

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field (or equivalent practical experience).
• 9+ years in security engineering roles, with deep expertise in data security.
• Deep, hands-on expertise with encryption, key management, secure data storage, secure data transfer, data loss prevention, and security in cloud environments.
• Strong understanding of global data protection and privacy regulations (e.g., GDPR, CCPA, PCI-DSS, SOC2).
• Demonstrated technical excellence in designing, building, and scaling data security solutions across complex, distributed systems. Ability to independently identify and solve the most challenging, ambiguous technical problems that have broad organizational impact.
• Track record of owning and delivering long-term, cross-functional projects and roadmaps in the area of data protection - directly driving key business outcomes.
• Proven experience leading cross-functional initiatives and influencing organizational direction and architecture.
• Exceptional communication, collaboration, and stakeholder management skills. Experience interacting confidently and credibly with executives, non-technical partners, and external stakeholders, clearly articulating risk and technical tradeoffs.
• Demonstrated commitment to fostering an inclusive, high-performing culture by developing others, promoting best practices, and leading by example in both technical and interpersonal domains.

Our Commitment To Inclusion & Belonging:

We strive to also provide a disability inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation in order to submit an application, please contact us at: . Please include your full name, the role you’re applying for and the accommodation necessary to assist you with the recruiting process.

Offices: United States